RE: Firewal on Windows ..

[Frank Knobbe <FKnobbe () KnobbeITS com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

As far as I know, Tiny Firewall watches all traffic going through the
Windows IP stack. That means that packets crafted by code in parallel
(i.e. LibNetNT) does not get filtered. I'm not aware of any host
based firewall that can prevent that (which is my main complaint
about that recent 'advisory'. It only listed TPF and BlackICE, but
I'm sure this applies to all firewalls, including Checkpoint, Raptor,
Gauntlet, ISA/MSProxy, etc).

Personal (or host based) firewalls are a nice complement, but not a
catch all solution. Remember, there is silver bullet (or was it a
spoon?).

Regards,
Frank


> -----Original Message-----
> From: Michael Steele [mailto:michaels () silicondefense com]
> Sent: Wednesday, December 19, 2001 12:04 PM
>
> Does T. P. F. watch outgoing requests?
>
> -----Original Message-----
> From: snort-users-admin () lists sourceforge net
> [mailto:snort-users-admin () lists sourceforge net] On Behalf Of Paul
> D. Shaffer
>
> If you want a recommendation for a host-based FW, I'd say 
> Tiny Personal
> Firewall from Tiny Software is the way to go:
>
> http://www.tinysoftware.com/home/tiny?la=EN&va=aa
>
> It has a clean, easy-to-use interface, good depth of customization
> features
> and I read a comparison review on speedguide.net awhile back where
> it handily beat Black Ice, Zone Alarm and some others in terms of
> both reliability and performance.
>
> Paul
 

-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.8
Comment: PGP or S/MIME (X.509) encrypted email preferred.

iQA/AwUBPCFKmpytSsEygtEFEQIqvACfQcvbr6eyGesafGL8TBMYnsd5f3IAnRcW
dRfX2S9Xyo3q4Ym7BMW0r8v1
=fpCT
-----END PGP SIGNATURE-----

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users